CVE ID:	CVE-2022-23806
Description:	Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
Test IDs:	1.3.6.1.4.1.25623.1.0.892985   1.3.6.1.4.1.25623.1.0.892986   1.3.6.1.4.1.25623.1.1.1.2.2023.3395
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-23806 https://security.netapp.com/advisory/ntap-20220225-0006/ https://security.gentoo.org/glsa/202208-02 https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html